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CONTENT UTILIZING METHOD 

BACKGROUND OF THE INVENTION 
Field of the Invention 
5 The present invention relates to a content 

utilizing method, and more particularly to a method 
for copyright protection and usage control of a 
content in utilizing a digital content in the 
Internet . 

10 Related Background Art 

Recently, because of spreading of the Internet, 
a sales business of network distribution of digital 
contents is attracting attention. However, there is 
arising a fear that the digital contents are 

15 illegally utilized without a payment to the copyright. 
For this reason, there is being proposed a 
technology for protecting the copyright utilizing the 
technology of encryption and authorization, such as 
MagicGate of Sony. However, such technology has to 

20 utilize a special recording medium having the 

functions of encrypting and authorization, such as a 
memory stick. Also such method is unable to exploit 
the convenience of a copy distribution of digital 
contents . 

25 Also in the conventional content sales, the 

user pays a price for the content Itself, and such 
price is constant regeordless of an amount of usage of 
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the content, so that such method has been 
unreasonable for a user with a low amount of usage. 

SUMMARY OF THE INVENTION 
5 In consideration of the foregoing, an object of 

the present invention is to enable a content 
distribution freely without requiring a special 
recording medium, while achieving protection of the 
copyright . 

10 Another object of the present invention is to 

enable a payment of a price according to an amount of 
usage of content by the user. 

According to one aspect, the present invention 
which achieves these objectives relates to a content 

15 utilizing method in a system including a user 

terminal, a content server for providing a content, a 
content processing apparatus for processing a content, 
and a usage right controlling server for controlling 
a right of use of the content, the method including a 

20 use requesting step of selecting a content to be used 
and a condition of use therefore in the user terminal 
and requesting the use of such content to the content 
server, a content transmitting step of encrypting the 
content with a predetermined encrypting key in the 

25 content server and transmitting the content to the 
content processing apparatus, a license control 
Information transmitting step of generating. In the 
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content server, license control information including 
usage right information having identification 
information and condition of use of the selected 
content and user specific information, and 
5 transmitting it together with a decrypting key 
corresponding to the encrypting key to the usage 
right control server, a ticket transmitting step of 
generating, in the content server, a ticket including 
an identifier of the license control information and 

10 transmitting it to the content processing apparatus, 
an authorization step of transmitting the identifier 
of the license control information from the content 
processing apparatus to the usage right control 
server, which communicates with the content 

15 processing apparatus based on the user specific 
information in the license control information 
corresponding to the identifier, thereby verifying an 
authorization for use of the user, a usage right 
information transmitting step of transmitting the 

20 usage right information and the decrypting key from 
the authorizing seirver to the content processing 
apparatus, and a content processing step of 
decrypting the content by the decrypting key in the 
content processing apparatus and processing the 

25 decrypted content based on the usage right 
Information. 

Other objectives and advantages besides those 
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discussed above shall be apparent to those skilled in 
the art from the description of a preferred 
embodiment of the invention which follows. In the 
description, reference is made to accompanying 
5 drawings, which form a part thereof, and which 

illustrate an example of the invention. Such example, 
however, is not exhaustive of the various embodiments 
of the invention, and therefore reference is made to 
the claims which follow the description for 
10 determining the scope of the invention. 



BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram showing the 
configuration of an entire content distribution 
15 system in a first embodiment; 

Fig. 2 is a flow chart showing a content 
distributing procedure in the first embodiment; 

Fig. 3 is a view showing an example of a 
content trading menu image; 
20 Fig. 4 is a view showing an example of a usage 

right script; 

Fig. 5 is a view showing an example of a 
structure of a usage right script; 

Fig. 6 is a view showing an authorizing 
25 protocol for a qualification for use in the first 
embodiment ; 

Fig. 7 is a view showing an example of a usage 
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right menu; and 

Fig. 8 is a view showing an authorizing 
protocol for a qualification for use in a second 
embodiment . 

5 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

In the following, a preferred embodiment of the 
present invention will be explained with reference to 
accompanying drawings . 

10 At first, there will be explained an outline of 

the embodiment of the present invention, A user 
wishing to purchase a content makes an access to a 
commerce server of contents, and, upon finding an 
interesting content, selects one of conditions of use 

15 proposed by a licensor of the content. Based on the 
selected condition of use, a usage right (right to 
use) script is generated represented by a usage right 
(right to use) language. 

The content is encrypted with a first 

20 encrypting key, and becomes a program including 
content information (for example a Java® applet 
format, hereinafter referred to as a content package). 
Then a license control, including such content 
information, a second encrypting key and the 

25 aforementioned usage right script, is prepared by 
license control preparation means. Also use ticket 
generation means generates a use ticket Including 
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license control information and the second encrypting 
key. In case it can be assumed that the user of the 
content has a third encrypting key ( secret key of a 
public key encryption system) in advance, the use 
5 ticket need not include the second encrypting key. 
Such license control information is to specify the 
aforementioned prepared license control. 

The user downloads the content package and the 
use ticket to a specified PC or a specified digital 

10 composite equipment. The PC or the digital composite 
equipment in which the content packet is placed will 
hereinafter be called a content executing device. 

The license control is transferred from the 
commerce server to the usage right control server, 

15 but it remains in the commerce server in case the 
commerce server also functions as the usage right 
control server. The server in which the license 
control is placed will hereinafter be called a usage 
right (right to use) control server (or UCS: usage 

20 control server) . 

When the user executes the content package in 
the content executing device, the content package 
reads the license control information in the use 
ticket, and transfers it to the usage right control 

25 server. The usage right control server specifies a 
license control corresponding to the license control 
Information among a license control database managed 
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by the UCS. 

Then authorization data are prepared by 
encrypting the user information contained in the 
license control, the content information and a random 
5 number with the second encrypting key. The usage 
right control server transmits such authorization 
data to the content executing device, and the content 
package transmits decrypted data, obtained by 
decrypting the authorization data by the second 

10 encrypting key contained in the use ticket or by the 
third encrypting key entered by the user, to the 
usage right control server. The usage right control 
server checks whether the decrypted data coincide 
with the data prior to the encryption, and, in case 

15 the authorization is successful, transmits a usage 
right script and the first encrypting key to the 
content executing device. The content package 
decrypts the content with the first encrypting key 
according to the condition of use of the usage right 

20 script, and then executes a printing, a display or a 
playing. 

The above -explained process for verifying the 
right of use after the license control is specified 
may also be executed in a following manner. The UCS 
25 generates a random number and transmits the random 
number to the content executing device. The content 
executing device encrypts the random number with the 
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second encrypting key or the third encrypting key 
entered by the user thereby preparing authorization 
data. The content package transmits such 
authorization data to the UCS. The UCS decrypts such 
5 authorization data with the second encrypting key 
contained in the license control and verifies the 
authorization by checking whether the decrypted data 
coincide with the transmitted random nximber, 
( First embodiment ) 

10 Fig. 1 is a block diagram showing an entire 

configuration of a content distribution system of the 
present embodiment . 

A client PC (terminal) 2 used by the user is 
connected to an Internet protocol 1 with a protocol 

15 such as HTTP, FTP, POP3 or SMTP. A content commerce 
server 3, having a content for sale, is also 
connected to the Internet 1. 

A content executing device 4 is constituted of 
a PC or a network- adaptable digital copying machine, 

20 for executing a display or a copy of the content. 
The content executing device 4 has a software 
necessary for connection to the Internet 1 (for 
example an OS, various internet protocols, SSL, or 
www browser), and a Java® VM environment. 

25 A usage right control server 5 controls a right 

of use of the content for the user, are also 
connected to the Internet 1. The content executing 
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device 4 and the usage right control server 5 may be 
constituted of a single server having both functions. 

A content package 11, a use ticket 12 and a 
license control 13 are respectively data handled in 
5 the system. Details of these data will be explained 
later. 

In the following, a content distributing 
protocol of the present embodiment will be explained 
with reference to a flow chart shown in Fig. 2. Fig. 

10 2 shows a process from a purchase of a content by the 
user to a charging of a fee. 

At first the user executes an access from its 
terminal 2 to the content commerce server 3 utilizing 
a web browser such as a Netscape navigator, and, upon 

15 finding a desired content, makes an instruction for a 
purchase. Then, in a step S201, the content commerce 
searver 3 displays an account menu of the content on 
the web browser of a display of the user terminal 2 . 
Fig. 3 shows a displayed image of the content 

20 account menu. An account menu image 300 shows a 

content ID 301, a content name 302, selectable rights 
of use and charging methods thereof. In Fig. 3, a 
"printing" right (authorization) 303 only is 
displayed as the usage right, but there may also be 

25 displayed a * display" right, a "copy" right etc. 

Also in Fig. 3, the printing provides options 
of black-and-white and color printing, and charges 
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corresponding to the selected option are displayed in 
charge displaying columns 309 - 312. Each of check 
boxes 303 - 307 displays a check mark "V" upon 
selection of a corresponding item. 
5 The user selects "printing" 303 and then 

selects either "black and white" or "color" (step 
S202). In this example, it is assumed that "color" 
is selected. 

Then the user selects, for the charging method, 

10 either an "actual charge type" 304 or a "prepaid 
type" 305. For the actual charge type 304, there 
will be charged a basic printing fee (charged 
regardless whether the content is used or not) or 300 
Yen and a fee of 1200 Yen per a printing. In the 

15 prepaid type 305, there is further selected a pre- 
payment for two printings (check box (A) 306) or a 
pre-payment for ten printings (check box (B) 307). 

For the selection of the check box (A) 306, 
there will be charged 2000 Yen as a fee for the two 

20 printings, and, for the selection of the check box 

(B) 307, there will be charged 9000 Yen as a fee for 
the ten printings . 

Also by clicking "others" button 308 with a 
mouse, the display shifts to an image (not shown) for 

25 selecting prepaid charges for other numbers of 

printings thcui the check box (A) 306 and check box 
(B) 307, whereby the user is enabled to select other 
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numbers of printing. 

In a step S203, the user selects the charging 
type as explained above, and enters a password 
specific to the user (hereinafter referred to as user 
5 key) in a password input column 313. Then an OK 
button 314 is clicked, whereupon the information 
entered in the account menu image is transmitted to 
the content commerce server 3. Between the terminal 
2 and the content commerce server, a secure 

10 communication is established by a protocol such as 
SSL. On the other hand, in case a cancel button 315 
is depressed, the entered information is canceled and 
the display returns to a state for reentry. 

The content commerce server 3, upon receiving 

15 the information designated by the user in the account 
menu image 300, executes following three processes 
(step S204). Firstly, it encrypts data of the 
content to generate a content package 11. Secondly, 
it generates a license control 13 including a usage 

20 right script (hereinafter abbreviated as URS). 
Thirdly, it generates a use ticket 12. 

The data of the content are encrypted by a 
public key encoryption system such as DES, utilizing 
an encryption key (called content key). The content 

25 key may be determined in advance, or prepared for 
each content, each account or each user. 

The content package 11 is a Java® applet with 
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program codes to be explained later. The content 
package 11 also includes content information such as 
a content ID and a content name. 

When the user selects necessary items in the 
5 account menu image 300, a URS described in the XML 
language based on the selected information. Fig. 4 
shows an example 400 of the URS. Also Fig. 5 shows a 
structure of the URS. 

In Fig. 5, information 501, 510 to 513, 520 to 

10 522 are all text data each sandwiched with XML tags. 
For example, content information 511 is sandwiched 
between content tags and has a form of <content> to 
</content>. The URS has a hierarchic structure, and 
a description of a lower block is sandwiched between 

15 the tags of an upper block. 

A header part 510 Indicates the entire script, 
and contains content information 511, licensor 
(person licensing use of content) information 512, 
and licensee (person receiving license of use of 

20 content) information 513. 

A main part 520 describes a condition of use, 
and includes an array of right codes 521. Charge 
information 522 describes information of charging in 
case the user (licensee) utilizes the right code 521. 

25 The right codes Include Play, Print, Copy, 

Transfer, Loeui and Delete. Play Is a right of 
executing a play such as display, play, game etc. of 
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the content; Print is a right to print the content; 
Copy is a right to distribute a copy of the content 
to a third person; Transfer is a right of 
transferring the content to a third person; Loan is a 
5 right of temporarily lending the content to a third 
person; and Delete is a right of erasing the content 
and receiving a payback • 

A URS sample 400 shown in Fig. 4 includes 
descriptions of content information 401, licensor 

10 information 402, licensee information 403, a play 

(display) right code 404, a print right code 405, and 
a copyright code (right code for copy distribution of 
content right) 406. The print right code 405 
describes that a color printing is possible and that 

15 2000 Yen are charged for two printings. 

The license control 13 Includes the user key 
entered in the password input column 313 of the 
account menu image 300, the URS 400, content 
infoimation and a license control ID. Since the URS 

20 400 contains the user ID and the content ID, it is to 
be noted that the user ID and the content ID are 
contained in the license control 13. The license 
control ID is an ID number uniquely given to the 
license control 13. 

25 In the step S204, a user ticket 12 is also 

generated. The use ticket 12 memorizes the user key 
and the license control ID mentioned above. 
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Then a step S205 downloads necessary files. The 
content package 11 and the use ticket 12 are 
downloaded from the content commerce server 3 to the 
content executing device 4 connected to the Internet 
5 1 and managed by the user. 

On the other hand, the license control 13 and 
the content key 14 are transferred from the content 
commerce server 3 to the usage right control server 5 
under the management of the seller (licensor) of the 

10 content. In case the usage right control server 5 is 
same as the content commerce server 3 , the license 
control 13 remains in the content commerce server 3 . 

In a step S206, the user executes the content 
package 11 in the content executing device 4 under 

15 its management. Since the content package 11 is a 

Java® applet, it can be executed from the web browser. 
The content package 11 at first verifies an 
authorization of use, in order to confirm whether the 
user is a user who has properly purchased the content. 

20 A protocol of such use authorization verification is 
shown in Fig. 6. 

The content package 11 establishes a secure 
communication session such as SSL with the usage 
right control server 5. Then it reads the use ticket 

25 12 and acquires the license control ID. The content 
package 11 sends the license control ID to the usage 
right control server 5 and request a search of the 
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license control 13 corresponding to the use ticket 12 
(A in Fig. 6) . 

The usage right control server (USC) 5 manages, 
in a database, license controls of licenses purchased 
5 by many users. The usage right control server (USC) 
5 searches the license control 13 corresponding to 
the license control ID, and generates a random number. 
It generates authorization data by encrypting data, 
formed by combining the user ID and the content ID 

10 contained in the license control 13 and the above- 
mentioned random number, with the user key. In the 
present embodiment, the user key is a password 
constituted of a character train. 

The encryption, utilizing a designated 

15 character train as the key, can be executed by a 

known technology such as UNIX® Crypt program. 
Otherwise, a higher security can be obtained by an 
encryption method such RSA or PGP, utilizing the user 
key as a public of a public key encryption process. 

20 The usage right control server (UCS) 5 

transmits the authorization data to the content 
executing device 4, and requests a decryption of the 
authorization data (B in Fig. 6). 

The content package 11 decrypts the 

25 authorization data with the user key in the use 

ticket 12. Otherwise, in case the authorization data 
are encrypted with a public key encryption method. 
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the decryption is executed with secret key data 
managed by the user. In this case, there is required 
an operation of entering the secret key. Then the 
decrypted authorization data are transmitted to the 
5 usage right control server (UCS) 5 and a checking is 
requested (C in Fig. 6). 

The usage right control server (UCS) 5 checks 
whether the authorization data prior to the 
encryption and the decrypted authorization data 

10 transmitted from the content executing device 4 are 
mutually same. If not, it is judged that the user of 
the content executing device 4 does not have a proper 
authorization for use, then an authorization error is 
transmitted to the content executing device 4 and the 

15 process is terminated. If same, it is judged that 
the user of the content executing device 4 has a 
proper authorization for use, and the URS 400 in the 
license control 13 is transmitted to the content 
executing device 4 (D in Fig. 6). 

20 The content executing device 4 checks whether 

the transmitted URS 400 belongs thereto by inspecting 
the user information. In case of no problem, a usage 
right menu based on the URS 400 is displayed on a 
display of the content executing device 4. Also the 

25 content is decrypted by the content key of the use 
ticket 12 (step S208). For example, in case of the 
URS 400 shown in Fig. 4, three rights of Play 
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(display). Print and Copy are displayed on the usage 
right menu. 

Fig. 7 shows an example of the usage right menu. 
The usage right menu image 700 shown in Fig. 7 
5 includes a check box 701 for selecting the right of 
use, an OK button 702 for executing the selected 
usage right, and a cancel button 703 for terminating 
the process. 

The user selects a desired right among these 

10 rights (step S209). Let us consider a case, for 
example, of selecting Print (printing in Fig. 7). 
Since the Print is a prepaid charging method for two 
prints in the example shown in Fig. 4, the content 
package 11 sends a request to the usage right control 

15 server (UCS) 5 for checking whether the payment has 

been made and whether two printings have already been 
made ( E in Fig . 6 ) • 

The usage right control server (UCS) 5 executes 
such checks and, in case of any problem, transmits a 

20 charging check error to the content executing deyice 
4. Also an OK is transmitted in case the charging 
check finds no problem (F in Fig. 6; step S210). The 
content package 11 terminates the process in case of 
receiving the charging check error. 

25 The content package 11, upon receiving an OK, 

executes the Print right (step S211) . When the 
execution is terminated in a normal manner, use 

i 
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history data are transmitted to request a charging 
process to the usage right control server (UCS) 5 (G 
in Fig. 6 ) . 

The usage right control server (UCS) 5 executes 
5 a corresponding charging to the licensee described in 
the license control 13 (step S212). The usage right 
control server (UCS) 5 has a memory area (credit 
account) for memorizing a credit to the licensee, and 
the charged amount is added to such credit account. 
10 Then the remaining sum of the account is requested to 
the licensee for example at the end of each month. 

In the present example, since there is adopted 
the prepaid charging method, the addition to the 
account is executed at the preparation (step S204) of 
15 the license control 13 (including the URS 400), and 
the step S212 executes a process of decreasing a 
remaining number available in the prepaid amount. 

Also in case of executing the right for which 
the actual charging method is selected, the step S212 
20 adds a fee of the condition designated by the UURS 
400 to the credit account. 

In the present embodiment, as explained in the 
foregoing, when the content commerce server 3 
receives the information designated by the user 
25 according to the content of the account menu image 

300 displayed on the terminal 2, the content package 
11 and the use ticket 12 are downloaded from the 
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content commerce server 3 to the content executing 
device 4, and the license control 13 is transferred 
from the content commerce server 3 to the usage right 
control server 5 • 
5 Then the usage right control server 5 utilizes 

the user key in the transferred license control 13 
for encrypting the corresponding license control 13 
thereby preparing authorization data, and sends it to 
the content executing device 4 • 

10 The content executing device 4 utilizes the 

user key in the use ticket 12 to decrypt the 
transmitted authorization data and sends it to the 
usage right control server 5 . In case the 
authorization data prior to the encryption are same 

15 as the decrypted authorization data, the usage right 
control server 5 judges that the user of the content 
executing device 4 has an authorization for use, and 
transmits the usage right script 400 and the content 
key in the license control 13 to the license 

20 executing device 4. 

The license executing device 4 checks the user 
Information for confiarming that the transmitted usage 
right script 400 belongs to it, and, in case there is 
no problem, displays a usage right menu 700 based on 

25 the usage right script 400 on the display of the 

content executing device 4 and decrypts the content 
by the trcuismltted content key. 
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In the above-described configuration, the 
content package 11, being encrypted, cannot be 
improperly utilized upon delivery. 

In the event that the user gives the use ticket 
5 12 to another third person, such third person may 
improperly use such use ticket 12. However, there 
should not be a major problem since the user usually 
manages the use ticket 12 confidentially as personal 
information of its own. 

10 (Second embodiment) 

In the following, a second embodiment will be 
explained. The present embodiment is different from 
the first embodiment in the method of verifying the 
authorization for use. More specifically, the 

15 verification of the authorization for use in (A) to 

(D) in Fig. 6 is replaced by a method shown in Fig. 8. 
Therefore, an explanation will be given only to the 
verification of the authorization for use and other 
portions will not be explained. 

20 Referring to Fig. 8, the usage right control 

server (UCS) 5 generates a random number and 
transmits it to the content executing device (801). 
The content package 11 receives the random number and 
encrypts the random number with the second encrypting 

25 key or the third encrypting key (which is a secret 

key of the user in a public key encrypting system, in 
which case the second encrypting key becomes a public 

i 
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corresponding to such secret key) to prepare 
authorization data, and send it to the usage right 
control server (UCS) 5 (802). 

The usage right control server (UCS) 5 decrypts 
5 the received authorization data with the second 

encrypting key contained in the license control 13, 
and makes a comparison with the random number prior 
to the transmission. In case of coincidence, the 
authorization for use is confirmed and the URS is 

10 transmitted to the content executing device (803). 
On the other hand, in case of no coincidence, the 
authorization for use is considered absent, and for 
example a verification error is transmitted to the 
content executing device to terminate the process. 

15 In the present embodiment, as explained in the 

foregoing, the authorization for use is verified by 
transmitting and receiving a random number between 
the usage right control server 5 and the content 
executing device 4 to achieve the verification of the 

20 authorization for use in an easy and secure manner* 
The embodiments explained in the foregoing 
enable arbitrary delivery of the content package 
without employing a special recording medium, thereby 
allowing to increase the distribution of the contents. 

25 Also for the payment of the charge for the usage of 
the content, there can be employed a charging method 
In which the user of the content makes a payment 
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according to the number of uses. 

• The present invention may be applied to a 
system formed by plural equipment (for example a main 
computer, an interface equipment, a display etc.) or 
5 to an apparatus constituted of a single equipment, 
within an extent that the functions of the 
aforementioned embodiments can be realized. 

The present invention also includes a 
configuration of supplying a computer in the 

10 apparatus or the system, connected with various 

devices for operating such devices so as to realize 
the functions of the aforementioned embodiments, with 
program codes of a software for realizing the 
functions of the aforementioned embodiments and the 

15 computer (or CPU or MPU) of such system or apparatus 
operates the devices according to the supplied 
program. In such case, the program codes themselves 
read from a memory medium realize the functions of 
the aforementioned embodiments, and such progrcim 

20 codes themselves, or means for supplying the computer 
with such program codes, for example a memory mediiim 
storing the program codes , constitutes the present 
invention. 

The memory medium for supplying such program 
25 codes can be, for example, a floppy disk, a hard disk, 
an optical disk, a magnetooptlcal disk, a CD-ROM, a 
CD-R, a magnetic tape, a non-volatile memory card or 
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a ROM. 

Also the present invention naturally includes 
the program codes not only in a case where the 
computer executes the read program codes to realize 
5 the functions of the aforementioned embodiments, but 
also in a case where an OS (operating system) 
functioning on the computer or another application 
realizes the functions of the aforementioned 
embodiments under the instructions of such program 
10 codes. 

Furthermore, the present invention includes a 
case where the program codes read from the memory 
medium are once stored in a memory provided in a 
function expansion board inserted in the computer or 

15 a function expansion unit connected to the computer, 
and a CPU or the like provided in such function 
expansion board or the function expansion unit 
executes all the actual processes or a part thereof 
thereby realizing the functions of the aforementioned 

2 0 embodiment s . 

In case the present invention is applied to the 
memory medium mentioned above, program codes 
corresponding to the foregoing flow charts can be 
stored in such memory medium. 

25 Although the present invention has been 

described in its preferred form with a certain degree 
of particularity, many apparently widely different 
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embodiments of the invention can be made without 
departing from the spirit and the scope thereof. It 
is to be understood that the invention is not limited 
to the specific embodiments thereof except as defined 
in the appended claims . 



